Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: HVapqxNdtcLlecoIfZwg5DHD6/HYr4v1mmTtuLS8E40=
Subject key identifier: C6:4B:DC:05:E5:72:F3:E5:23:50:D6:A9:CA:C6:4F:6D:17:E1:63:C6
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 0196CD9860D535D37DC2EB70603AD0451917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 0618
Signing time: Wed 14 May 2025 07:00:37 +0000
Manifest this update: Wed 14 May 2025 07:00:37 +0000
Manifest next update: Thu 15 May 2025 07:00:37 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: JIF5roxGGgnuMGP5EjvSWXOL5gEc9QB0u/G/eEFcxMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:60:d5:35:d3:7d:c2:eb:70:60:3a:d0:45:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: May 14 07:00:37 2025 GMT
Not After : May 15 07:00:37 2025 GMT
Subject: CN=c64bdc05e572f3e52350d6a9cac64f6d17e163c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:33:59:f6:d0:92:f9:8d:16:4d:1e:0a:17:
8b:a0:2b:45:e1:e0:47:90:35:8c:9b:1d:21:7d:79:
df:17:d5:74:21:c1:e6:a9:ce:a4:16:4f:4b:e2:bc:
75:01:36:3f:06:56:7e:8f:c7:cb:3f:fb:54:df:32:
40:06:d7:00:ce:5a:73:78:ed:61:a6:ff:7a:a6:23:
42:fc:4b:b0:a6:4a:da:e4:e5:a9:d5:0e:f2:e6:b8:
71:fd:76:1c:2c:15:c4:b6:55:4b:f5:28:6b:01:82:
50:6a:b7:68:fd:78:6e:21:46:aa:9b:15:cf:47:03:
88:b8:1f:ce:2d:01:02:64:87:0c:2c:33:c7:8d:32:
1e:6e:89:71:75:9a:3b:aa:6c:60:2f:2b:a7:28:cd:
4d:1e:15:a9:ac:d9:13:b0:b3:92:bd:e2:f5:d0:9b:
b8:ed:f7:40:ad:86:ee:0a:55:6b:ee:2e:2c:49:3e:
3b:cb:31:c7:fa:f1:5c:aa:a7:01:87:43:0a:09:61:
fb:ce:08:a7:02:81:fa:b7:84:7c:35:d2:cf:cc:19:
99:2e:99:8b:24:df:31:6b:f8:84:7e:6a:b8:56:57:
61:5c:ee:ae:51:c1:b1:2e:be:37:8f:b1:64:53:15:
84:f4:fd:9b:2a:d8:4e:66:1a:6b:02:36:39:45:33:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:DC:05:E5:72:F3:E5:23:50:D6:A9:CA:C6:4F:6D:17:E1:63:C6
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fa:60:74:24:20:bd:af:61:33:3b:a7:e7:80:b6:6b:58:ac:
ae:31:33:2a:2f:28:04:ce:01:0c:39:38:77:4b:aa:e3:ab:00:
57:6b:e0:ba:d0:f6:ce:35:c1:e9:97:45:d0:56:4b:88:97:67:
22:a6:26:c9:c1:9e:17:00:03:18:cf:fb:3a:df:ed:9a:bb:19:
1a:08:3c:8a:4b:90:27:ac:95:79:9c:f4:40:49:03:09:b1:ca:
47:08:76:d3:1d:2e:22:f7:06:5b:5e:c8:bd:61:00:f3:c8:1d:
32:a5:b2:4b:dd:87:9d:ce:f9:03:3b:e7:f9:07:b7:90:33:49:
1d:23:60:74:69:19:eb:18:81:87:4e:a7:14:59:61:89:02:74:
f7:ee:36:00:66:e8:ca:0f:88:99:ec:fe:8b:08:6c:56:d2:a3:
38:91:e0:c1:46:3f:12:76:0a:76:f3:8d:cc:28:17:c7:97:0a:
6d:b2:08:cb:4d:1f:db:c9:b2:6e:55:84:42:41:d6:db:de:e0:
1f:fb:5c:47:5d:3a:ac:19:b6:4e:d3:93:66:82:be:d7:cb:74:
e6:63:b4:9b:d6:3f:a1:40:55:9a:df:a3:55:6a:5f:d7:09:eb:
1c:31:2a:83:70:82:b5:5b:38:f4:24:41:70:b6:fb:ad:5f:bf:
8a:dc:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:02:41 2025 by rpki-client